TeamClu Browser Extension — Privacy Policy

Last updated: October 21, 2026

This policy explains how the TeamClu team ("TeamClu", "we", "us") collects, uses, stores, shares and protects information when you use the TeamClu Chrome extension (Chrome Web Store ID nlmkpmokfbboonocdnngddbfpdedkfee, the "Extension") and the TeamClu service it connects to (the "Service").

1. Single purpose

TeamClu adds a Chrome side panel in which you chat with your team and your team's AI agents and, when you choose, share the web page you are viewing as context for that conversation.

2. Information we collect

• Account information — your email address and display name. If you use “Sign in with Google”, we receive your Google account name, email address and profile picture (OpenID scopes email and profile only). If you use password sign-in, your password is sent over TLS to our authentication server and stored there only as a salted hash. Authentication tokens are stored on our server and in the side panel's local storage in your browser so you stay signed in.
• Conversation content — messages, attachments and files you send in the side panel, session titles, and the replies produced by AI agents and teammates.
• Web page content you choose to share — the URL, title, visible text, selected text, links and a simplified outline of the page in your active tab. It is collected only when (a) an AI agent in your conversation asks to read the current page and you approve that request in the side panel, or (b) you click the TeamClu link button that appears on websites you added to the allow-list in Settings (this shares that link, its text and the surrounding page). The Extension does not read pages in the background, does not request the tabs permission and does not collect your browsing history.
• Local settings — your link-button allow-list, page-access and diagnostics choices and UI preferences, stored only in your browser (chrome.storage / local web storage).
• Diagnostics (opt-in, off by default) — only if you turn on “Send anonymous error reports” in Settings, error reports (stack traces, Extension and browser version, a random installation ID, and redacted console/network breadcrumbs) are sent to our error-monitoring provider. No account identity or IP address is attached.
• Server logs — like most online services, our servers record IP addresses, timestamps and request metadata for security, abuse prevention and troubleshooting.
• We do not collect payment or financial information, health information, precise location, keystrokes or mouse movements, or the content of pages you have not chosen to share.

3. How we use information

We use information only to: sign you in and keep your account secure; deliver and sync messages within your team; send the content you share to your team's AI agent and the AI model it uses so it can answer you; operate, secure and troubleshoot the Service; and, if you opted in, fix crashes. We do not use your information for advertising, do not sell it, do not use it to determine creditworthiness or for lending purposes, and do not use it for any purpose unrelated to the Extension's single purpose.

4. How we share information

• Your team — messages and shared page content in a team conversation are visible to members of that team.
• Agent hosts — your team's AI agents run on computers connected to your team (the TeamClu agent daemon), which may be operated by TeamClu or by members of your team. Conversation content, including page content you shared, is delivered to the agent host that serves the conversation.
• AI model providers — to generate replies, the relevant conversation content, including shared page content, is sent to the large-language-model provider configured for your team. On our hosted Service the default provider is DeepSeek; team administrators may configure other providers (for example OpenAI) or their own model endpoint. These providers process the data under their own API terms.
• Service providers — Alibaba Cloud (servers, database, file storage and e-mail delivery, in mainland China); Google (only when you use Google sign-in); Sentry, United States (only if you opted in to error reports). They process data on our behalf to provide the Service.
• Legal reasons — when required by law, or to protect the rights, property or safety of our users, the public or TeamClu.
• We never sell or rent personal data, and we do not share it with data brokers or advertisers.

5. Storage, retention and security

The Service is hosted on Alibaba Cloud servers in Shenzhen, mainland China. Data is encrypted in transit with TLS, access to production systems is restricted, and passwords are stored only as salted hashes.

• Account data is kept until you delete your account.
• Conversations and shared page content are kept until you or your team administrator delete the conversation or the team, or your account is deleted.
• Server logs and error reports are kept for a limited period (no longer than 90 days) unless needed to investigate a security incident.
• Local settings stay in your browser until you clear them or uninstall the Extension.
• When you ask us to delete your account, we delete your account data within 30 days, except where we are required by law to keep it.

6. International transfers

Your information is stored and processed in mainland China. If you use the Extension from another country, your information will be transferred to China, and to the countries where the providers listed above operate (for example the United States for Google and Sentry). We take the measures required by applicable law for such transfers.

7. Your choices and rights

• Turn agent page access off entirely, or decline any individual request, in the side panel (Settings → General → Privacy).
• Turn error reports on or off at any time in the same place.
• Remove site access you granted at chrome://extensions → TeamClu → Site access, or uninstall the Extension at any time.
• Revoke Google sign-in access at myaccount.google.com/permissions.
• Request access to, correction, export or deletion of your data, or your whole account, by e-mailing [email protected]. Depending on where you live (for example under the EU/UK GDPR, the California CCPA or China's PIPL) you may have further rights, including objecting to processing and lodging a complaint with a supervisory authority. We respond within 30 days.

8. Permissions the Extension uses

• sidePanel — shows the TeamClu chat in Chrome's side panel.
• activeTab — lets the Extension access the tab you are on after you click the TeamClu toolbar button, so a page you approve sharing can be read.
• scripting — injects the content script that extracts the page you approved sharing, and shows the link button on allow-listed sites.
• storage — keeps your local settings in your browser.
• identity — used only for the optional “Sign in with Google” flow.
• Optional site access (http://*/*, https://*/*) — not granted at install. Chrome asks you only when you approve an agent's page request or add a site to the link-button allow-list, and only for that purpose.

9. Children

The Extension is not directed to children under 13 (or under 14 in mainland China), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

10. Chrome Web Store Limited Use

Our use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

11. Changes to this policy

We will post any change on this page and update the “Last updated” date. If a change is material, we will tell you in the Extension or by e-mail before it takes effect.

12. Contact

Questions or requests about this policy or your data: [email protected] · www.teamclu.ai